9b4ee86b8755e1cad0177a4a7fb2e56f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9b4ee86b8755e1cad0177a4a7fb2e56f
Size

1.9MB
MD5

9b4ee86b8755e1cad0177a4a7fb2e56f
SHA1

66e58f3a534ffce56024cea3aad959086333c038
SHA256

4ccc6746edeec627d18efdb2dda893e6e5c1ec3ed662aa5a137c9541f448b04a
SHA512

2674031815d1704e48b274dac5fb60ce4dd7878908b37c8ea6d67242b70c7193d3218d3d461ce1a05ad89f836d1818329a345178ff3e4f2a51ea2bba9da779b9
SSDEEP

49152:UKfpvd7laH5ipxUo3gXpLoMzEx8e0bfaHhemQJvndw7t:pv+sXYLo+s8e0byHhvKdwp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack003/Keygen.exe

Files

9b4ee86b8755e1cad0177a4a7fb2e56f
.rar
di-sp200.zip
.zip
di-sp20.rar
.rar
Keygen.exe
.exe windows:4 windows x86 arch:x86

f342ff097c4ac4ee5626e9cf1509e94b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

msimg32

AlphaBlend

gdi32

UnrealizeObject

version

VerQueryValueA

comctl32

_TrackMouseEvent

shell32

SHGetPathFromIDListA

ole32

CreateStreamOnHGlobal

olepro32

OleLoadPicture

shlwapi

SHGetValueA

msvcrt

swprintf

setupapi

SetupDiDestroyDeviceInfoList

iphlpapi

GetAdaptersInfo

Sections

.text
Size: 1.9MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Sound Forge 10 bugfix for 32 bit Windows.reg
Sound Forge 10 bugfix for 64 bit Windows.reg
diginsan.nfo
file_id.diz
diginsan.nfo
file_id.diz